$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft File: mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json) Hash identifier: mkbecOq/pF7DWcLBTiXVaZ7jfwb105l/IiOMFI7hR7Y= Subject key identifier: 03:DE:35:E2:14:5B:CF:8B:5D:E7:28:55:C6:C8:FC:8E:A7:10:D1:E8 Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB Certificate issuer: /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft Manifest number: F7 Signing time: Sun 19 Oct 2025 08:07:56 +0000 Manifest this update: Sun 19 Oct 2025 08:07:55 +0000 Manifest next update: Sun 26 Oct 2025 08:07:55 +0000 Files and hashes: 1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: N1YmApraicYRXv6WG7Ic14tSsF+xnHS4aq/YUFOHjHM=) 2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: FWDEQfcrySfMIWIlPkoTcMajRo2lEM/ZyKql4949RJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB Validity Not Before: Oct 19 08:07:55 2025 GMT Not After : Oct 26 08:07:55 2025 GMT Subject: CN=68f49c5c-89f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:79:ce:0a:50:9c:9a:31:de:60:8e:99:e1: 40:3f:66:96:48:71:d5:92:f0:8f:64:d7:3f:4a:88: 8b:fb:e5:2d:06:f5:3b:28:c4:24:ba:de:b3:5a:b2: 72:c9:de:d9:65:d9:94:9b:20:30:63:b5:2a:42:e9: bf:97:e2:5d:4f:6e:9e:7e:fe:4a:de:c9:55:2e:e3: aa:81:84:90:39:69:3a:6e:49:f3:bc:ed:9e:ee:ef: 27:e3:e1:59:05:eb:5e:1f:85:f4:29:5c:45:b2:4d: 5f:da:8b:be:8e:8a:21:21:62:1b:2d:54:93:8f:53: c7:2e:1e:f7:9e:32:e1:b5:43:5c:28:29:c0:93:d1: 9e:9a:04:5a:4d:66:2b:71:43:cc:ed:2d:90:f2:15: 74:2d:21:e7:f9:6b:0e:f9:e0:8a:80:88:9d:2f:5e: 50:61:75:ee:d0:9a:32:0d:df:bd:7d:53:ac:c1:c3: d1:92:66:9a:4c:93:41:83:6a:38:24:b7:22:8f:b9: 43:5e:94:95:a9:cf:07:91:eb:45:8e:94:36:7c:c2: 11:38:4c:f2:7b:56:d4:fe:d0:2e:d0:62:b5:4f:03: 90:c0:51:4f:ff:dd:51:64:75:a1:33:8f:4f:dc:17: c9:61:46:d5:da:d6:26:9a:6e:d1:07:8a:fe:ba:c3: 2e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:35:E2:14:5B:CF:8B:5D:E7:28:55:C6:C8:FC:8E:A7:10:D1:E8 X509v3 Authority Key Identifier: keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:00:c7:a7:83:c2:60:64:d8:8f:17:09:97:af:dc:67:bc:7a: 7d:7f:c1:5b:35:f9:ba:b5:db:b8:40:2a:20:15:11:e2:b4:19: 73:5c:63:3b:05:a5:19:28:55:bf:10:0d:8e:44:c3:6d:a1:a7: ef:30:0e:2b:6f:96:2d:1f:30:11:71:37:e8:d3:aa:26:ba:8e: df:ef:80:4d:16:cf:d8:96:4b:49:80:4b:8d:b9:64:9d:58:31: 23:bc:c0:93:6f:20:5b:37:f4:0e:f2:4f:4a:be:6e:09:e9:ad: f1:4e:4a:f4:c1:cf:e2:11:9b:d8:fb:c8:76:6f:bf:23:d6:14: 85:ec:2f:49:5d:ae:0b:23:1a:c7:91:12:2c:1b:ea:fb:25:d5: c1:07:c6:a5:79:17:67:7b:40:07:da:8e:ec:0d:cb:20:d8:71: 15:07:80:7e:60:da:94:43:64:0d:f5:42:22:87:0d:13:30:ad: 14:80:02:0e:06:f7:ff:d5:d8:c9:b6:2f:a2:d3:48:d3:96:4e: f1:60:b0:ba:ab:f7:87:01:a1:d3:c5:99:a9:ef:b3:37:5d:b6: 4a:51:67:5d:05:60:99:8c:fb:b3:ba:c1:2f:e2:87:ec:e6:cd: c1:d4:0d:4a:af:d5:e0:c5:31:e2:e9:d8:31:58:52:08:08:51: 31:d4:87:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0RDMxMTAvBgNVBAUTKDk5NkIxOTZGQ0EzQzcyMTg3MUVFOUUxNDEzOTMyQjhC NTBFRDA5QUIwHhcNMjUxMDE5MDgwNzU1WhcNMjUxMDI2MDgwNzU1WjAYMRYwFAYD VQQDEw02OGY0OWM1Yy04OWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eN5zgpQnJox3mCOmeFAP2aWSHHVkvCPZNc/SoiL++UtBvU7KMQkut6zWrJy yd7ZZdmUmyAwY7UqQum/l+JdT26efv5K3slVLuOqgYSQOWk6bknzvO2e7u8n4+FZ BeteH4X0KVxFsk1f2ou+joohIWIbLVSTj1PHLh73njLhtUNcKCnAk9GemgRaTWYr cUPM7S2Q8hV0LSHn+WsO+eCKgIidL15QYXXu0JoyDd+9fVOswcPRkmaaTJNBg2o4 JLcij7lDXpSVqc8HketFjpQ2fMIROEzye1bU/tAu0GK1TwOQwFFP/91RZHWhM49P 3BfJYUbV2tYmmm7RB4r+usMuwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPeNeIU W8+LXecoVcbI/I6nENHoMB8GA1UdIwQYMBaAFJlrGW/KPHIYce6eFBOTK4tQ7Qmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjREMy8xNTUwNDhFQTMz ODkxMUVGOTlGRDFDMjdDNEY5QUUwMi9tV3NaYjhvOGNoaHg3cDRVRTVNcmkxRHRD YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21Xc1piOG84Y2hoeDdwNFVFNU1yaTFEdENhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjREMy8xNTUwNDhFQTMzODkxMUVGOTlGRDFDMjdDNEY5QUUwMi9tV3NaYjhvOGNo aHg3cDRVRTVNcmkxRHRDYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOAMeng8JgZNiPFwmXr9xnvHp9f8FbNfm6tdu4QCogFRHitBlzXGM7 BaUZKFW/EA2ORMNtoafvMA4rb5YtHzARcTfo06omuo7f74BNFs/YlktJgEuNuWSd WDEjvMCTbyBbN/QO8k9Kvm4J6a3xTkr0wc/iEZvY+8h2b78j1hSF7C9JXa4LIxrH kRIsG+r7JdXBB8aleRdne0AH2o7sDcsg2HEVB4B+YNqUQ2QN9UIihw0TMK0UgAIO Bvf/1djJti+i00jTlk7xYLC6q/eHAaHTxZmp77M3XbZKUWddBWCZjPuzusEv4ofs 5s3B1A1Kr9XgxTHi6dgxWFIICFEx1Icj -----END CERTIFICATE-----Generated at Tue Oct 21 04:55:13 2025 by rpki-client